Privacy Policy

Last updated: 2026-07-17

Tacit is an early-stage service operated by its founder. This policy is deliberately short: it lists everything we actually collect and everything we actually do with it. When the service grows, this page will grow with it — with the date above updated.

What we collect

Your email address, used to sign you in via a magic link and to communicate with you about the service. Signing in is the only account mechanism; there are no passwords.

Product analytics through Mixpanel: page views and interactions on this site, plus product usage events inside the authenticated app. Analytics requests are sent through same-origin Tacit endpoints before being forwarded to Mixpanel, so they appear as first-party traffic. The authenticated app may also record privacy-masked session replays to help us diagnose where the product fails; the marketing site does not record sessions.

Marketing attribution: if you arrive through a campaign link, the campaign parameters (utm_*, promo) and the referring page are stored in a first-party cookie for up to 90 days and linked to your account when you sign up. This answers one question — “how did this person find Tacit” — and nothing else.

The working material you bring into the product (briefs, notes, candidate material) is processed to provide the service and is treated as yours throughout.

What we never do

We do not sell your data or use it for advertising. We do not share it with advertisers, use third-party advertising cookies, or track you across unrelated sites.

Tacit never contacts your clients or candidates. It has no outbound surface; it only works on the material you bring to it.

Who processes data on our behalf

We rely on a small set of infrastructure providers to run the service: hosting and databases (Vercel, Neon), transactional email for sign-in links (Resend), product analytics (Mixpanel), and AI model providers that process the content you submit in order to produce the product’s output. Each receives only what its function requires.

Your choices

You can ask us to export or delete your account and its data, or to stop analytics collection for your use of Tacit, at any time. Write to the address below; the request is handled directly by the founder. Browser privacy controls may also block some analytics, and the product works without analytics.

Cookies we use

Authentication cookies keep a signed-in session secure. tacit_has_session is a 30-day first-party marker that sends an already signed-in visitor from the marketing homepage to the app; it contains no account details. tacit_attr is a 90-day first-party attribution cookie containing the campaign and landing information described above.

When analytics is enabled, Mixpanel uses first-party cookies to keep an anonymous device identifier and related analytics state for up to one year. Those cookies are shared across Tacit’s marketing and app routes so a visit can be connected to a later signup; they are not advertising cookies.

Contact

Questions, export or deletion requests: contact@tacit.agency. You are writing to the founder, not a queue.